$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa File: 86f10792-ebce-3d34-b619-59f83c89ced3.roa (raw, json) Hash identifier: 8bwsB6s5QE6qLpPV3eryZeqKHRVtOkLGhylffKtdbj4= Subject key identifier: 00:10:55:CC:B2:09:4F:7F:40:75:18:02:0E:FE:CD:40:92:AC:56:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F15CCF4709C16052ED8AA7D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f4:70:9c:16:05:2e:d8:aa:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=1113dda0-ddc0-4c0f-ad2c-7ca417e419f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:00:60:65:d9:c1:8e:d9:cc:76:e7:0c:40: 70:a8:9b:1f:38:54:52:dd:cf:d3:c6:25:0a:e2:40: 1b:04:69:56:c5:82:64:cc:f3:c6:3f:97:c2:a2:09: 4c:24:3e:2f:66:6a:c1:b9:e8:04:96:0f:5a:4d:e6: 93:1f:0b:37:03:17:bf:5c:e3:76:3a:b0:ca:d9:bb: b2:d9:7b:fe:ee:1c:b1:ea:0c:fc:24:24:d8:a0:56: 82:51:25:7a:82:9c:01:36:f0:2c:07:6e:27:d0:8a: 0d:42:0a:ba:7c:96:71:93:99:0c:e6:86:5c:b2:c7: 85:13:42:ec:48:16:17:b2:45:0b:a4:f8:fa:dd:c3: c9:7b:67:ae:b2:b1:af:e4:c0:ff:45:54:7b:2b:9e: 2f:2a:2e:ab:44:88:cd:d6:ed:c6:9a:cb:1d:8b:76: fa:50:9d:24:ef:ba:23:d1:da:3f:29:13:4d:9f:fc: c9:7b:d8:57:41:b4:0d:10:8c:2c:58:25:0e:b4:3e: 9e:25:94:93:bc:57:42:64:fe:da:8f:49:56:a3:c5: be:c5:07:68:34:d0:12:83:e8:16:8c:5c:d8:97:b2: 00:a2:77:1a:cb:97:00:34:1c:a0:6e:f2:4c:3d:16: 81:3e:88:11:70:08:5f:7d:65:cd:c4:7f:a0:61:e7: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:55:CC:B2:09:4F:7F:40:75:18:02:0E:FE:CD:40:92:AC:56:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.66.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c1:cf:cd:a4:e0:46:87:87:9a:b1:33:e6:da:2e:dc:b8:eb: 79:3a:84:ca:49:25:12:fb:7c:15:74:da:38:1a:73:78:04:5a: 96:80:a3:6d:ab:fc:e4:6e:91:c0:30:30:58:bc:df:f8:41:02: 21:43:74:fa:5b:77:21:14:38:51:ab:a6:8f:54:78:7d:cf:ed: 72:0c:8a:9b:bf:bf:6c:41:c6:ee:2f:21:77:b9:68:80:76:a3: d0:28:69:2b:79:c7:f7:99:4f:28:82:4c:38:6c:6c:c0:10:31: 83:7a:60:41:04:4f:38:af:2c:4b:21:85:d9:51:56:53:c0:65: e7:f2:9a:00:bf:be:cc:84:12:80:f3:51:36:cb:b9:da:52:df: fa:4e:b6:97:0e:93:3d:1d:2b:86:fd:4f:65:c4:dc:1a:fe:a3: 34:92:fc:d7:1e:f2:da:ba:38:c2:07:41:99:69:5b:28:98:4b: 78:7a:12:d3:4b:62:02:77:40:aa:59:91:38:e7:cc:40:42:be: a4:4b:b7:3a:63:83:ae:7d:be:60:2b:12:80:95:9e:bf:92:0e: 0e:08:23:64:8d:b6:98:cc:a4:ec:75:a8:ab:c9:b6:09:5d:1e: 10:3f:4b:81:f4:03:c7:4d:30:c9:5f:31:fe:ba:3f:f2:c8:cf: e3:80:ce:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPRwnBYFLtiqfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MTExM2RkYTAtZGRjMC00YzBmLWFkMmMtN2NhNDE3ZTQxOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0UAYGXZwY7ZzHbnDEBwqJsfOFRS3c/TxiUK 4kAbBGlWxYJkzPPGP5fCoglMJD4vZmrBuegElg9aTeaTHws3Axe/XON2OrDK2buy 2Xv+7hyx6gz8JCTYoFaCUSV6gpwBNvAsB24n0IoNQgq6fJZxk5kM5oZcsseFE0Ls SBYXskULpPj63cPJe2eusrGv5MD/RVR7K54vKi6rRIjN1u3Gmssdi3b6UJ0k77oj 0do/KRNNn/zJe9hXQbQNEIwsWCUOtD6eJZSTvFdCZP7aj0lWo8W+xQdoNNASg+gW jFzYl7IAoncay5cANBygbvJMPRaBPogRcAhffWXNxH+gYeeCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAQVcyyCU9/QHUYAg7+zUCSrFbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZmMTA3OTItZWJjZS0z ZDM0LWI2MTktNTlmODNjODljZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInBz82k4EaHh5qxM+baLty463k6hMpJJRL7fBV02jgac3gEWpaAo22r /ORukcAwMFi83/hBAiFDdPpbdyEUOFGrpo9UeH3P7XIMipu/v2xBxu4vIXe5aIB2 o9AoaSt5x/eZTyiCTDhsbMAQMYN6YEEETzivLEshhdlRVlPAZefymgC/vsyEEoDz UTbLudpS3/pOtpcOkz0dK4b9T2XE3Br+ozSS/Nce8tq6OMIHQZlpWyiYS3h6EtNL YgJ3QKpZkTjnzEBCvqRLtzpjg659vmArEoCVnr+SDg4II2SNtpjMpOx1qKvJtgld HhA/S4H0A8dNMMlfMf66P/LIz+OAzko= -----END CERTIFICATE-----Generated at Tue Sep 22 21:11:33 2026 by rpki-client